OPENSUSE-SU-2020:1876-1 Security update for bluez

This update for bluez fixes the following issues: - CVE-2020-27153: Fixed possible crash on disconnect bsc1177895. This update was imported from the SUSE:SLE-15:Update update project...

OPENSUSE-SU-2020:1840-1 Security update for tiff

This update for tiff fixes the following issues: - CVE-2019-14973: Fixed an improper check which was depended on the compiler which could have led to integer overflow bsc1146608. This update was imported from the SUSE:SLE-15:Update update project...

openSUSE Security Update : libvirt (openSUSE-2020-1778)

This update for libvirt fixes the following issues : - CVE-2020-15708: Added a note to libvirtd.conf about polkit auth in SUSE distros bsc1174955. - CVE-2020-25637: Fixed a double free in qemuAgentGetInterfaces bsc1177155. - qemu: Adjust max memlock on mdev hotplug bsc1177480. - Xen: Don't add do...

OPENSUSE-SU-2020:1799-1 Security update for tomcat

This update for tomcat fixes the following issues: - CVE-2020-13943: Fixed HTTP/2 Request mix-up bsc1177582 This update was imported from the SUSE:SLE-15-SP2:Update update project...

OPENSUSE-SU-2020:1703-1 Security update for php7

This update for php7 fixes the following issues: - CVE-2020-7069: Fixed an issue when AES-CCM mode was used with opensslencrypt function with 12 bytes IV, only first 7 bytes of the IV was used bsc1177351. - CVE-2020-7070: Fixed an issue where percent-encoded cookies could have been used to...

OPENSUSE-SU-2020:1644-1 Security update for nodejs8

This update for nodejs8 fixes the following issues: - CVE-2020-15095: Fixed information leak through log files bsc1173937. - Explicitly add -fno-strict-aliasing to CFLAGS to fix compilation on Aarch64 with gcc10 bsc1172686. This update was imported from the SUSE:SLE-15:Update update project...

OPENSUSE-SU-2020:1628-1 Security update for perl-DBI

This update for perl-DBI fixes the following issues: - CVE-2019-20919: Fixed a NULL profile dereference in dbiprofile bsc1176764. This update was imported from the SUSE:SLE-15-SP2:Update update project...

OPENSUSE-SU-2020:1620-1 Security update for perl-DBI

This update for perl-DBI fixes the following issues: - CVE-2019-20919: Fixed a NULL profile dereference in dbiprofile bsc1176764. This update was imported from the SUSE:SLE-15:Update update project...

OPENSUSE-SU-2020:1613-1 Security update for python-pip

This update for python-pip fixes the following issues: - CVE-2019-20916: Fixed a directory traversal in downloadhttpurl bsc1176262 This update was imported from the SUSE:SLE-15:Update update project...

OPENSUSE-SU-2020:1591-1 Security update for bcm43xx-firmware

This update for bcm43xx-firmware fixes the following issues: - Update bluetooth firmware to address Sweyntooth and Spectra issues bsc1176631: This update was imported from the SUSE:SLE-15-SP1:Update update project...

OPENSUSE-SU-2020:1575-1 Security update for rubygem-actionpack-5_1

This update for rubygem-actionpack-51 fixes the following issues: - CVE-2020-8164: Possible Strong Parameters Bypass in ActionPack. There is a strong parameters bypass vector in ActionPack. bsc1172177 This update was imported from the SUSE:SLE-15:Update update project. This update was imported fr...

OPENSUSE-SU-2020:1568-1 Security update for libqt5-qtbase

This update for libqt5-qtbase fixes the following issues: - CVE-2020-17507: Fixed a buffer overflow in XBM parser bsc1176315 - Made handling of XDGRUNTIMEDIR more secure bsc1172515 This update was imported from the SUSE:SLE-15-SP1:Update update project...

OPENSUSE-SU-2020:1539-1 Security update for openldap2

This update for openldap2 fixes the following issues: - CVE-2020-8027: openldapupdatemodulespath.sh starts daemons unconditionally and uses fixed paths in /tmp bsc1175568. This update was imported from the SUSE:SLE-15:Update update project...

OPENSUSE-SU-2020:1536-1 Security update for rubygem-actionpack-5_1

This update for rubygem-actionpack-51 fixes the following issues: - CVE-2020-8164: Possible Strong Parameters Bypass in ActionPack. There is a strong parameters bypass vector in ActionPack. bsc1172177 This update was imported from the SUSE:SLE-15:Update update project...

OPENSUSE-SU-2020:1535-1 Security update for ovmf

This update for ovmf fixes the following issues: - CVE-2019-14562: Fixed an overflow in DxeImageVerificationHandler bsc1175476. - Use openSUSE CA for the opensuse flavor bsc1175674 This update was imported from the SUSE:SLE-15:Update update project...

OPENSUSE-SU-2020:1533-1 Security update for rubygem-actionpack-5_1

This update for rubygem-actionpack-51 fixes the following issues: - CVE-2020-8164: Possible Strong Parameters Bypass in ActionPack. There is a strong parameters bypass vector in ActionPack. bsc1172177 This update was imported from the SUSE:SLE-15:Update update project...

OPENSUSE-SU-2020:1502-1 Security update for perl-DBI

This update for perl-DBI fixes the following issues: Security issues fixed: - CVE-2020-14392: Memory corruption in XS functions when Perl stack is reallocated bsc1176412. - CVE-2020-14393: Fixed a buffer overflow on an overlong DBD class name bsc1176409. This update was imported from the...

OPENSUSE-SU-2020:1494-1 Security update for curl

This update for curl fixes the following issues: - An application that performs multiple requests with libcurl's multi API and sets the 'CURLOPTCONNECTONLY' option, might in rare circumstances experience that when subsequently using the setup connect-only transfer, libcurl will pick and use the...

OPENSUSE-SU-2020:1455-1 Security update for libvirt

This update for libvirt fixes the following issues: - CVE-2020-14339: Don't leak /dev/mapper/control into QEMU. Use ioctl's to obtain the dependency tree of disks and drop use of libdevmapper. bsc1161883, bsc1174458 This update was imported from the SUSE:SLE-15-SP2:Update update project...

OPENSUSE-SU-2020:1430-1 Security update for libxml2

This update for libxml2 fixes the following issues: - CVE-2020-24977: Fixed a global-buffer-overflow in xmlEncodeEntitiesInternal bsc1176179. This update was imported from the SUSE:SLE-15:Update update project...